The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > OS Specific Forums > OS X (Apple)
Google UNIX.COM


OS X (Apple) OS X is a line of Unix-based graphical operating systems developed, marketed, and sold by Apple.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Root admin info deedaz UNIX for Dummies Questions & Answers 2 01-20-2008 03:38 AM
root/admin commands in LINUX naina UNIX for Dummies Questions & Answers 6 12-26-2005 01:24 AM
Assigning Authorization to a user kayode Linux 5 04-27-2005 08:43 AM
shh authorization problem progressdll UNIX for Advanced & Expert Users 1 04-09-2004 04:32 AM

Reply
 
Submit Tools LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 03-03-2004
ropers's Avatar
Registered User
 

Join Date: Dec 2001
Location: Dublin
Posts: 44
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
root/admin authorization and PackageMaker

I am building an installable package (.pkg) with PackageMaker 1.1.11 (that's the one that comes with Panther).
The package is for installing things both to /Applications and to some folders in /Library (/Library/StartupItems and a new folder that I'm putting in /Library).
I do (obviously) not choose Overwrite (directory) permissions.
I am putting the whole stuff together as recommended, mirroring the actual directory structure in the folder I am building my package from, choosing a Default Location of /, making it non-relocatable.
I am permissioning my "source" folder in the exact way that I want the files to be later -- mostly root:admin with rwxrwxr-x and rw-rw-r--. (Admins should be allowed to muck around with it, but no one else.)
Now I have two choices: I can either select Admin Authorization or Root Authorization as the Authorization Action.
(No Authorization Required obviously wouldn't do what I want.)

I am unsure which one of the two to choose, and what the effective difference is between them (if any).

Now, no jumping to conclusions here, please folks.
I do know the difference between an admin and the root account.
HOWEVER:The Developer documentation states (under "Authorization, File Ownership, and Permissions"):

Quote:
Even if a package specifies root authorization, a user can authenticate by supplying the administrator password and can then install the software.
(Emphasis by me.)

It further says:

Quote:
If authorization is required, the files are owned by the owner specified in the files archive within the package, regardless of the user and password supplied to complete the authentication.
and:

Quote:
Authorization should be set to root if any component needs to be set to root.
(Emphasis by me.)

Now, maybe I am getting this wrong, but it seems to me that this means that there is virtually no effective difference between asking for root or admin authorization in this scenario (the only difference being that according to Table 12-1 in the said documentation, requiring Root Authorization will promt an admin user to enter their password,
whereas requiring just Admin Authorization would not prompt an admin user.

Am I right?
Is that the only difference?
Is it otherwise inconsequential whether I ask for Root or Admin authorization in this scenario?

Help on this is MUCH appreciated.

rop
Reply With Quote
Forum Sponsor
  #2 (permalink)  
Old 03-03-2004
Registered User
 

Join Date: Sep 2002
Location: San Fran
Posts: 105
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
If you have no test machine and/or test boot volume to attempt installation and running the installed software on, then you might want to see about enlisting the support of someone that does (not volunteering )

In reality, safety first. If you do not need to provide root privileges to run your app, the Admin authorization is probably what you should use. Escalation to root should only be used when required.

I would think that the difference would be akin to the ramifications of "su -" vs. "sudo".

Sorry I don't have definitive (or maybe even correct) answer to your question. I believe that this installation privileges issue is applicable to any of the Unix threads here, so you may want to try the programming and advanced forums if you don't get a better response than mine.
Reply With Quote
  #3 (permalink)  
Old 03-03-2004
ropers's Avatar
Registered User
 

Join Date: Dec 2001
Location: Dublin
Posts: 44
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
Quote:
Originally posted by [MA]Flying_Meat
Sorry I don't have definitive (or maybe even correct) answer to your question.
You're very welcome, any thoughts on this are very welcome.
Reply With Quote
  #4 (permalink)  
Old 03-03-2004
LivinFree's Avatar
Goober Extraordinaire
 

Join Date: Jul 2001
Location: Portland, OR, USA
Posts: 1,584
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
I don't know for certain if the below is the only difference, nor am I sure how it relates to package installation, but here's my crack at it:

In OSX, root is the same as almost all other Unix systems. Administrator is almost as good. In OSX, an Administrator is in the admin group, which allows them to run "sudo", to run commands as root.

Now, knowing the little I do know about OSX, I do know root is not enabled by default. Administrator is. Depending on the administrator scripts, you may be able to require admin privelages, and sudo your commands.

Either way, they'll be prompted for either an admin, or the root, login. My gut instinct would tell me to go with administration requirements, not root.
Reply With Quote
  #5 (permalink)  
Old 03-03-2004
Registered User
 

Join Date: Sep 2002
Location: San Fran
Posts: 105
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit! Stumble this Post!Spurl this Post!
Quote:
Originally posted by LivinFree
I do know root is not enabled by default. Administrator is. Depending on the administrator scripts, you may be able to require admin privelages, and sudo your commands.

Either way, they'll be prompted for either an admin, or the root, login. My gut instinct would tell me to go with administration requirements, not root.
very excellent point, indeed! nice catch!

(though, that begs the musical question, if root being enabled or not could cause an installation to go belly up, how does Apple manage updates?
i'd guess from the melodious query that root is not a requirement for nearly every install...)
Reply With Quote
Google UNIX.COM
Reply

Thread Tools
Display Modes


The 50 most popular UNIX and Linux searches.
Google Search Cloud for The UNIX and Linux Forums
"inappropriate ioctl for device" 421 service not available, remote server has closed connection ascii eof autosys awk trim bash eval bash exec bash for loop boot: cannot open kernel/sparcv9/unix close_wait command copy/move folder in unix curses.h cut command in unix dead.letter find grep find null character in a unix file grep multiple lines grep or grep recursive grep unique inaddr_any inappropriate ioctl for device logrotate.conf lynx javascript mailx attachment mget mtime perl array length ping port remove first character from string in k shell replace space by comma , perl script scp recursive segmentation fault(coredump) sftp batch sftp script snoop unix stale nfs file handle syn_sent tar exclude unix unix com unix forum unix forums unix interview questions unix mtime unix simulator unix.com vi tab size vi+substitute+end+of+line+character while loop within while loop shell script


All times are GMT -7. The time now is 01:07 PM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008 The CEP Blog All Rights Reserved -Ad Management by RedTyger Visit The Global Fact Book

Content Relevant URLs by vBSEO 3.2.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101